Sign In Get Started

South Korea CBDC Pilot Skipped Post-Trial Security Review

Crypto▼ Bearish

South Korea CBDC Pilot Skipped Post-Trial Security Review

2026-07-21 11:24 UTCBy AlphaScala Research DeskSource reporting: BlockonomiEditorial standards

South Korea CBDC Pilot Skipped Post-Trial Security Review

Click a ticker for a live chart

South Korea's first CBDC pilot skipped independent government security review after testing ended, documents show. The Bank of Korea defends pre-launch checks as sufficient, but critics say the gap undermines public trust as the country pushes ahead with digital won plans.

Continue with

Dartmouth crypto ETF value falls 15% to $12.4M; shares unchanged

What is Bitcoin and how does it work?

South Korea's first central bank digital currency pilot did not undergo an independent government security review after testing ended, documents from the Financial Supervisory Service show.

The Bank of Korea ran the first phase of its retail CBDC trial, Project Han River, from April through June last year. Participating financial institutions handled the bulk of security assessments before launch, with assistance from outside cybersecurity firms. The FSS documentation confirms no government security examination took place after the trial concluded.

Before the test, Woori Bank and NongHyup Bank ran IT security evaluations and vulnerability scans through their internal audit divisions. The Financial Security Institute and SK Shields also participated in the preliminary checks. Critics say this created a conflict: the same institutions that built the infrastructure also tested it.

The Bank of Korea pushed back in its published analysis of the pilot. The central bank said deposit tokens did not contain IT security vulnerabilities and that thorough system evaluations happened before Project Han River started. What the documents do not show is an outside party independently validating those security findings after the trial ended.

The FSS records show minimal regulatory oversight across the broader CBDC program. Just one official consultation on CBDC or deposit token offerings took place over three years. That meeting involved Shinhan Bank and an insurance product tied to deposit tokens.

The Bank of Korea argued that further inspections during or after the test were unnecessary because security evaluations had already been completed. The central bank said the methodology followed FSS supervisory protocols. Industry participants say independent verification would help build public confidence in digital currency projects.

South Korea is pressing ahead with digital payments infrastructure despite the questions. Gyeonggi Province plans a government-backed blockchain stablecoin trial running from August through February 2027. Financial regulators recently laid out a strategy that covers won-denominated stablecoins, institutional CBDC tests, tokenized government securities, deposit tokens, and participation in the Bank for International Settlements' Project Agora. The Bank of Korea has stressed that deposit tokens are not the same as privately issued stablecoins. They are commercial bank deposits that run on wholesale CBDC infrastructure.

The next phase of Project Han River was supposed to include person-to-person transactions and expanded merchant payments. Banks put those plans on hold after raising concerns about implementation costs and whether the business case worked.

For readers tracking the broader shift in digital payments infrastructure, the South Korean case highlights a recurring tension. Central banks push forward with CBDC pilots while regulators and independent auditors play catch-up. The Bank of Korea's response – that pre-launch evaluations met existing supervisory rules – may satisfy domestic protocol. It does not address the gap between internal and external verification that critics have flagged.

The FSS documents show this gap is not unique to the pilot phase. The single consultation over three years suggests that regulatory engagement with the broader CBDC ecosystem has been thin. For an initiative that the Bank of Korea frames as a potential backbone for commercial banking and payments, the oversight infrastructure appears lighter than the technology infrastructure it is meant to govern.